{"id":10362,"date":"2020-04-26T01:35:06","date_gmt":"2020-04-26T01:35:06","guid":{"rendered":"https:\/\/nsfocusglobal.com\/?p=10362"},"modified":"2020-04-26T01:35:06","modified_gmt":"2020-04-26T01:35:06","slug":"oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert","status":"publish","type":"post","link":"https:\/\/nsfocusglobal.com\/pt-br\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/","title":{"rendered":"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert"},"content":{"rendered":"

Overview<\/strong><\/h2>\n

On April 14, 2020, local time, Oracle released its own security advisory and third-party security advisories for its April 2020 Critical Patch Update (CPU) which fix 397 vulnerabilities of varying severity levels across the product families. For details about affected products and available patches, visit the following link:<\/p>\n

<\/p>\n

https:\/\/www.oracle.com\/security-alerts\/cpuapr2020.html<\/strong><\/p>\n

Fixed Vulnerabilities<\/strong><\/h2>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Product<\/strong><\/td>\nNumber of Vulnerabilities<\/strong><\/td>\nNumber of Remote Exploits Without Auth.<\/strong><\/td>\nCVSS Base Score<\/strong><\/td>\n<\/tr>\n
Oracle Database server<\/strong><\/td>\n8<\/td>\n2<\/td>\n8.0<\/td>\n<\/tr>\n
Oracle Global Lifecycle Management<\/strong><\/td>\n1<\/td>\n0<\/td>\n0<\/td>\n<\/tr>\n
Oracle Secure Backup<\/strong><\/td>\n1<\/td>\n1<\/td>\n6.1<\/td>\n<\/tr>\n
Oracle Communications Applications<\/strong><\/td>\n39<\/td>\n35<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Construction and Engineering<\/strong><\/td>\n12<\/td>\n9<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle E-Business Suite<\/strong><\/td>\n74<\/td>\n70<\/td>\n8.6<\/td>\n<\/tr>\n
Oracle Enterprise Manager<\/strong><\/td>\n7<\/td>\n5<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Financial Services Applications<\/strong><\/td>\n35<\/td>\n16<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Food and Beverage Applications<\/strong><\/td>\n1<\/td>\n0<\/td>\n8.1<\/td>\n<\/tr>\n
Oracle Fusion Middleware<\/strong><\/td>\n51<\/td>\n44<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle GraalVM<\/strong><\/td>\n5<\/td>\n2<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Health Sciences Applications<\/strong><\/td>\n2<\/td>\n2<\/td>\n6.1<\/td>\n<\/tr>\n
Oracle Hyperion<\/strong><\/td>\n3<\/td>\n0<\/td>\n4.2<\/td>\n<\/tr>\n
Oracle Java SE<\/strong><\/td>\n15<\/td>\n15<\/td>\n8.3<\/td>\n<\/tr>\n
Oracle JD Edwards<\/strong><\/td>\n4<\/td>\n2<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Knowledge<\/strong><\/td>\n16<\/td>\n15<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle MySQL<\/strong><\/td>\n45<\/td>\n9<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle PeopleSoft<\/strong><\/td>\n14<\/td>\n10<\/td>\n8.6<\/td>\n<\/tr>\n
Oracle Retail Applications<\/strong><\/td>\n27<\/td>\n17<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Siebel CRM<\/strong><\/td>\n1<\/td>\n0<\/td>\n4.3<\/td>\n<\/tr>\n
Oracle Supply Chain<\/strong><\/td>\n4<\/td>\n3<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Support Tools<\/strong><\/td>\n2<\/td>\n2<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Systems<\/strong><\/td>\n9<\/td>\n2<\/td>\n9.8<\/td>\n<\/tr>\n
Oracle Utilities Applications<\/strong><\/td>\n2<\/td>\n2<\/td>\n7.5<\/td>\n<\/tr>\n
Oracle Virtualization<\/strong><\/td>\n19<\/td>\n1<\/td>\n8.8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Affected Products and Versions<\/strong><\/h2>\n

For details, see the appendix.<\/p>\n

Critical Patch Update<\/strong><\/h2>\n

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security fixes.<\/p>\n

Solution<\/strong><\/h2>\n

Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update fixes as soon as possible.<\/p>\n

Appendix<\/strong><\/h2>\n

The following table lists affected products (and their versions) and related patches.<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Affected Products and Versions<\/strong><\/td>\nPatch Availability Document<\/strong><\/td>\n<\/tr>\n<\/thead>\n
Application Performance Management, versions 12.1.0.5, 13.2.0.0, 13.3.0.0<\/a><\/td>\nEnterprise Manager<\/a><\/td>\n<\/tr>\n
Application Service Level Management, versions 13.2.0.0, 13.3.0.0<\/a><\/td>\nEnterprise Manager<\/a><\/td>\n<\/tr>\n
Enterprise Manager Base Platform, versions 12.1.0.5, 13.2.0.0, 13.3.0.0<\/a><\/td>\nEnterprise Manager<\/a><\/td>\n<\/tr>\n
Hyperion Financial Management, version 11.1.2.4<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Hyperion Financial Reporting, version 11.1.2.4<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Identity Manager Connector, version 9.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Instantis EnterpriseTrack, versions 17.1-17.3<\/a><\/td>\nOracle Construction and Engineering Suite<\/a><\/td>\n<\/tr>\n
Java Advanced Management Console, version 2.16<\/a><\/td>\nJava SE<\/a><\/td>\n<\/tr>\n
JD Edwards EnterpriseOne Tools, version 9.2<\/a><\/td>\nJD Edwards<\/a><\/td>\n<\/tr>\n
JD Edwards World Security, versions A9.3, A9.3.1, A9.4<\/a><\/td>\nJD Edwards<\/a><\/td>\n<\/tr>\n
MICROS Relate CRM Software, version 11.4<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
MySQL Client, versions 5.6.47 and prior, 5.7.29 and prior, 8.0.18 and prior<\/a><\/td>\nMySQL<\/a><\/td>\n<\/tr>\n
MySQL Cluster, versions 7.3.28 and prior, 7.4.27 and prior, 7.5.17 and prior, 7.6.13 and prior, 8.0.19 and prior<\/a><\/td>\nMySQL<\/a><\/td>\n<\/tr>\n
MySQL Connectors, versions 5.1.48 and prior, 8.0.19 and prior<\/a><\/td>\nMySQL<\/a><\/td>\n<\/tr>\n
MySQL Enterprise Monitor, versions 4.0.11.5331 and prior, 8.0.18.1217 and prior<\/a><\/td>\nMySQL<\/a><\/td>\n<\/tr>\n
MySQL Server, versions 5.6.47 and prior, 5.7.29 and prior, 8.0.19 and prior<\/a><\/td>\nMySQL<\/a><\/td>\n<\/tr>\n
MySQL Workbench, versions 8.0.19 and prior<\/a><\/td>\nMySQL<\/a><\/td>\n<\/tr>\n
Oracle Access Manager, versions 11.1.2.3.0, 12.2.1.3.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Agile PLM, versions 9.3.3, 9.3.5, 9.3.6<\/a><\/td>\nOracle Supply Chain Products<\/a><\/td>\n<\/tr>\n
Oracle API Gateway, version 11.1.2.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Application Express, versions prior to 19.2<\/a><\/td>\nDatabase<\/a><\/td>\n<\/tr>\n
Oracle Application Testing Suite, versions 13.2.0.1, 13.3.0.1<\/a><\/td>\nEnterprise Manager<\/a><\/td>\n<\/tr>\n
Oracle Banking Enterprise Collections, versions 2.7.0, 2.8.0<\/a><\/td>\nOracle Banking Platform<\/a><\/td>\n<\/tr>\n
Oracle Banking Enterprise Originations, versions 2.7.0, 2.8.0<\/a><\/td>\nOracle Banking Platform<\/a><\/td>\n<\/tr>\n
Oracle Banking Enterprise Product Manufacturing, versions 2.7.0, 2.8.0<\/a><\/td>\nOracle Banking Platform<\/a><\/td>\n<\/tr>\n
Oracle Banking Platform, versions 2.4.0, 2.4.1, 2.5.0, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, 2.9.0<\/a><\/td>\nOracle Banking Platform<\/a><\/td>\n<\/tr>\n
Oracle Big Data Discovery, version 1.6<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Business Intelligence Enterprise Edition, versions 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Business Process Management Suite, version 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Coherence, versions 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Communications ASAP Cartridges, versions 7.2, 7.3<\/a><\/td>\nOracle Communications ASAP Cartridges<\/a><\/td>\n<\/tr>\n
Oracle Communications Calendar Server, versions 8.0.0.2.0, 8.0.0.3.0<\/a><\/td>\nOracle Communications Calendar Server<\/a><\/td>\n<\/tr>\n
Oracle Communications Converged Application Server – Service Controller, version 6.1<\/a><\/td>\nOracle Communications Converged Application Server – Service Controller<\/a><\/td>\n<\/tr>\n
Oracle Communications Diameter Signaling Router (DSR), versions 8.0.0, 8.1.0, 8.2.0, 8.2.1<\/a><\/td>\nOracle Communications Diameter Signaling Router<\/a><\/td>\n<\/tr>\n
Oracle Communications Element Manager, versions 8.0.0, 8.1.0, 8.1.1, 8.2.0<\/a><\/td>\nOracle Communications Element Manager<\/a><\/td>\n<\/tr>\n
Oracle Communications Evolved Communications Application Server, version 7.1<\/a><\/td>\nOracle Communications Evolved Communications Application Server<\/a><\/td>\n<\/tr>\n
Oracle Communications Messaging Server, versions 8.0.2, 8.1.0<\/a><\/td>\nOracle Communications Messaging Server<\/a><\/td>\n<\/tr>\n
Oracle Communications Operations Monitor, versions 3.4.0, 4.0.0, 4.1.0, 4.2.0, 4.3.0<\/a><\/td>\nOracle Communications Operations Monitor<\/a><\/td>\n<\/tr>\n
Oracle Communications Service Broker, versions 6.0, 6.1<\/a><\/td>\nOracle Communications Service Broker<\/a><\/td>\n<\/tr>\n
Oracle Communications Services Gatekeeper, versions 6.0, 6.1<\/a><\/td>\nOracle Communications Services Gatekeeper<\/a><\/td>\n<\/tr>\n
Oracle Communications Session Report Manager, versions 8.0.0, 8.1.0, 8.1.1, 8.2.0<\/a><\/td>\nOracle Communications Session Report Manager<\/a><\/td>\n<\/tr>\n
Oracle Communications Session Route Manager, versions 8.0.0, 8.1.0, 8.1.1, 8.2.0<\/a><\/td>\nOracle Communications Session Route Manager<\/a><\/td>\n<\/tr>\n
Oracle Communications Unified Inventory Management, versions 7.3.0, 7.4.0<\/a><\/td>\nOracle Communications Unified Inventory Management<\/a><\/td>\n<\/tr>\n
Oracle Communications WebRTC Session Controller, version 7.2<\/a><\/td>\nOracle Communications WebRTC Session Controller<\/a><\/td>\n<\/tr>\n
Oracle Configurator, versions 12.1, 12.2<\/a><\/td>\nOracle Supply Chain Products<\/a><\/td>\n<\/tr>\n
Oracle Database Server, versions 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c<\/a><\/td>\nDatabase<\/a><\/td>\n<\/tr>\n
Oracle E-Business Suite, versions 12.1.1-12.1.3, 12.2.3-12.2.9<\/a><\/td>\nE-Business Suite<\/a><\/td>\n<\/tr>\n
Oracle Endeca Information Discovery Integrator, version 3.2.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Endeca Server, version 7.7.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Analytical Applications Infrastructure, versions 8.0.6-8.0.9<\/a><\/td>\nOracle Financial Services Analytical Applications Infrastructure<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Asset Liability Management, versions 8.0.6, 8.0.7<\/a><\/td>\nOracle Financial Services Asset Liability Management<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Balance Sheet Planning, version 8.0.8<\/a><\/td>\nOracle Financial Services Balance Sheet Planning<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Data Foundation, versions 8.0.6-8.0.9<\/a><\/td>\nOracle Financial Services Data Foundation<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management, versions 8.0.7, 8.0.8<\/a><\/td>\nOracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Funds Transfer Pricing, versions 8.0.6, 8.0.7<\/a><\/td>\nOracle Financial Services Funds Transfer Pricing<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Hedge Management and IFRS Valuations, versions 8.0.6-8.0.8<\/a><\/td>\nOracle Financial Services Hedge Management and IFRS Valuations<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Liquidity Risk Management, version 8.0.6<\/a><\/td>\nOracle Financial Services Liquidity Risk Management<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Liquidity Risk Measurement and Management, versions 8.0.7, 8.0.8<\/a><\/td>\nOracle Financial Services Liquidity Risk Measurement and Management<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Loan Loss Forecasting and Provisioning, versions 8.0.6-8.0.8<\/a><\/td>\nOracle Financial Services Loan Loss Forecasting and Provisioning<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Market Risk Measurement and Management, versions 8.0.6, 8.0.8<\/a><\/td>\nOracle Financial Services Market Risk Measurement and Management<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Price Creation and Discovery, version 8.0.7<\/a><\/td>\nOracle Financial Services Price Creation And Discovery<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Profitability Management, versions 8.0.6, 8.0.7<\/a><\/td>\nOracle Financial Services Profitability Management<\/a><\/td>\n<\/tr>\n
Oracle Financial Services Revenue Management and Billing Analytics, versions 2.6, 2.7, 2.8<\/a><\/td>\nOracle Financial Services Revenue Management and Billing Analytics<\/a><\/td>\n<\/tr>\n
Oracle FLEXCUBE Core Banking, version 4.0<\/a><\/td>\nOracle Financial Services Applications<\/a><\/td>\n<\/tr>\n
Oracle FLEXCUBE Private Banking, versions 12.0, 12.1<\/a><\/td>\nOracle Financial Services Applications<\/a><\/td>\n<\/tr>\n
Oracle Fusion Middleware MapViewer, version 12.2.1.3.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Global Lifecycle Management NextGen OUI Framework, versions 12.2.1.3.0, 12.2.1.4.0, 13.9.4.2.2<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Global Lifecycle Management OPatch, versions prior to 11.2.0.3.23, prior to 12.2.0.1.19, prior to 13.9.4.2.1<\/a><\/td>\nGlobal Lifecycle Management<\/a><\/td>\n<\/tr>\n
Oracle GraalVM Enterprise Edition, versions 19.3.1, 20.0.0<\/a><\/td>\nOracle GraalVM Enterprise Edition<\/a><\/td>\n<\/tr>\n
Oracle Health Sciences Information Manager, version 3.0<\/a><\/td>\nHealth Sciences<\/a><\/td>\n<\/tr>\n
Oracle Healthcare Data Repository, version 7.0<\/a><\/td>\nHealth Sciences<\/a><\/td>\n<\/tr>\n
Oracle Hospitality Reporting and Analytics, version 9.1.0<\/a><\/td>\nOracle Hospitality Reporting and Analytics<\/a><\/td>\n<\/tr>\n
Oracle HTTP Server, version 11.1.1.9.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle In-Memory Performance-Driven Planning, versions 12.1, 12.2<\/a><\/td>\nOracle Supply Chain Products<\/a><\/td>\n<\/tr>\n
Oracle Insurance Accounting Analyzer, versions 8.0.6-8.0.9<\/a><\/td>\nOracle Insurance Accounting Analyzer<\/a><\/td>\n<\/tr>\n
Oracle Java SE, versions 7u251, 8u241, 11.0.6, 14<\/a><\/td>\nJava SE<\/a><\/td>\n<\/tr>\n
Oracle Java SE Embedded, version 8u241<\/a><\/td>\nJava SE<\/a><\/td>\n<\/tr>\n
Oracle Knowledge, versions 8.6.0-8.6.3<\/a><\/td>\nOracle Knowledge<\/a><\/td>\n<\/tr>\n
Oracle Managed File Transfer, versions 12.2.1.3.0, 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Outside In Technology, versions 8.5.4, 8.5.5<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Real User Experience Insight, versions 13.1.2.1, 13.2.3.1, 13.3.1.0<\/a><\/td>\nEnterprise Manager<\/a><\/td>\n<\/tr>\n
Oracle Retail Advanced Inventory Planning, versions 14.0, 15.0, 16.0<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Back Office, version 14.1<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Central Office, version 14.1<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Customer Management and Segmentation Foundation, version 18.0<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Merchandising System, version 16.0<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Order Broker, versions 15.0, 16.0, 18.0, 19.0<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Point-of-Service, version 14.1<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Predictive Application Server, versions 15.0.3, 16.0.3<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Returns Management, version 14.1<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Store Inventory Management, version 16.0<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle Retail Xstore Point of Service, versions 7.1, 15.0, 16.0, 17.0, 18.0, 18.0.1<\/a><\/td>\nRetail Applications<\/a><\/td>\n<\/tr>\n
Oracle SD-WAN Edge, versions 7.3, 8.0, 8.1, 8.2<\/a><\/td>\nOracle SD-WAN Edge<\/a><\/td>\n<\/tr>\n
Oracle Secure Backup, versions prior to 18.1<\/a><\/td>\nOracle Secure Backup<\/a><\/td>\n<\/tr>\n
Oracle SOA Suite, versions 12.2.1.3.0, 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Solaris, versions 10, 11<\/a><\/td>\nSystems<\/a><\/td>\n<\/tr>\n
Oracle Transportation Management, versions 6.3.7, 6.4.2, 6.4.3<\/a><\/td>\nOracle Supply Chain Products<\/a><\/td>\n<\/tr>\n
Oracle Unified Directory, versions 12.2.1.3.0, 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle Utilities Framework, versions 2.2.0, 4.2.0.2, 4.2.0.3, 4.3.0.2-4.3.0.6, 4.4.0.0, 4.4.0.2<\/a><\/td>\nOracle Utilities Applications<\/a><\/td>\n<\/tr>\n
Oracle Utilities Network Management System, versions 1.12.0.3, 2.3.0.1, 2.3.0.2, 2.4.0.0<\/a><\/td>\nOracle Utilities Applications<\/a><\/td>\n<\/tr>\n
Oracle VM VirtualBox, versions prior to 5.2.40, prior to 6.0.20, prior to 6.1.6<\/a><\/td>\nVirtualization<\/a><\/td>\n<\/tr>\n
Oracle WebCenter Portal, versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle WebCenter Sites, versions 12.2.1.3.0, 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
Oracle WebLogic Server, versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0<\/a><\/td>\nFusion Middleware<\/a><\/td>\n<\/tr>\n
OSS Support Tools, versions 20.0, 20.1<\/a><\/td>\nSupport Tools<\/a><\/td>\n<\/tr>\n
PeopleSoft Enterprise CS Campus Community, version 9.2<\/a><\/td>\nPeopleSoft<\/a><\/td>\n<\/tr>\n
PeopleSoft Enterprise HCM Absence Management, version 9.2<\/a><\/td>\nPeopleSoft<\/a><\/td>\n<\/tr>\n
PeopleSoft Enterprise HRMS, version 9.2<\/a><\/td>\nPeopleSoft<\/a><\/td>\n<\/tr>\n
PeopleSoft Enterprise PeopleTools, versions 8.56, 8.57, 8.58<\/a><\/td>\nPeopleSoft<\/a><\/td>\n<\/tr>\n
PeopleSoft Enterprise SCM Purchasing, version 9.2<\/a><\/td>\nPeopleSoft<\/a><\/td>\n<\/tr>\n
Primavera Gateway, versions 16.2.0-16.2.11, 17.12.0-17.12.6, 18.8.0-18.8.8, 19.12.0<\/a><\/td>\nOracle Construction and Engineering Suite<\/a><\/td>\n<\/tr>\n
Primavera P6 Enterprise Project Portfolio Management, versions 16.2.0.0-16.2.19.3, 17.12.0.0-17.12.17.0, 18.8.0.0-18.8.18.0, 19.12.1.0-19.12.3.0, 20.1.0.0-20.2.0.0<\/a><\/td>\nOracle Construction and Engineering Suite<\/a><\/td>\n<\/tr>\n
Primavera Unifier, versions 16.1, 16.2, 17.7-17.12, 18.8, 19.12<\/a><\/td>\nOracle Construction and Engineering Suite<\/a><\/td>\n<\/tr>\n
Siebel Applications, versions 20.2 and prior<\/a><\/td>\nSiebel<\/a><\/td>\n<\/tr>\n
StorageTek Tape Analytics SW Tool, version 2.3.0<\/a><\/td>\nSystems<\/a><\/td>\n<\/tr>\n
Sun ZFS Storage Appliance Kit, version 8.8<\/a><\/td>\nSystems<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/strong><\/p>\n

Statement<\/strong><\/h2>\n

This advisory is only used to describe a potential risk. NSFOCUS does not provide any commitment or promise on this advisory. NSFOCUS and the author will not bear any liability for any direct and\/or indirect consequences and losses caused by transmitting and\/or using this advisory. NSFOCUS reserves all the rights to modify and interpret this advisory. Please include this statement paragraph when reproducing or transferring this advisory. Do not modify this advisory, add\/delete any information to\/from it, or use this advisory for commercial purposes without permission from NSFOCUS.<\/p>\n

About NSFOCUS<\/strong><\/h2>\n

NSFOCUS, Inc., a global network and cyber security leader, protects enterprises and carriers from advanced cyber attacks. The company’s Intelligent Hybrid Security strategy utilizes both cloud and on-premises security platforms, built on a foundation of real-time global threat intelligence, to provide multi-layered, unified and dynamic protection against advanced cyber attacks.<\/p>\n

NSFOCUS works with Fortune Global 500 companies, including four of the world’s five largest financial institutions, organizations in insurance, retail, healthcare, critical infrastructure industries as well as government agencies. NSFOCUS has technology and channel partners in more than 60 countries, is a member of both the Microsoft Active Protections Program (MAPP), and the Cloud Security Alliance (CSA).<\/p>\n

A wholly owned subsidiary of NSFOCUS Technologies Group Co., Ltd., the company has operations in the Americas, Europe, the Middle East and Asia Pacific.<\/p>\n","protected":false},"excerpt":{"rendered":"

Overview On April 14, 2020, local time, Oracle released its own security advisory and third-party security advisories for its April 2020 Critical Patch Update (CPU) which fix 397 vulnerabilities of varying severity levels across the product families. For details about affected products and available patches, visit the following link:<\/p>\n","protected":false},"author":1,"featured_media":7955,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[6],"tags":[572],"class_list":["post-10362","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-emergency-response","tag-oracle"],"acf":[],"yoast_head":"\nOracle April 2020 Critical Patch Update for All Product Families Threat Alert - NSFOCUS<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert - NSFOCUS\" \/>\n<meta property=\"og:description\" content=\"Overview On April 14, 2020, local time, Oracle released its own security advisory and third-party security advisories for its April 2020 Critical Patch\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/\" \/>\n<meta property=\"og:site_name\" content=\"NSFOCUS\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-26T01:35:06+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2019\/01\/oracle123.jpg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert - NSFOCUS\" \/>\n<meta name=\"twitter:description\" content=\"Overview On April 14, 2020, local time, Oracle released its own security advisory and third-party security advisories for its April 2020 Critical Patch\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2019\/01\/oracle123.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\"},\"headline\":\"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert\",\"datePublished\":\"2020-04-26T01:35:06+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/\"},\"wordCount\":1530,\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/oracle123.jpg\",\"keywords\":[\"Oracle\"],\"articleSection\":[\"Emergency Response\"],\"inLanguage\":\"pt-BR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/\",\"name\":\"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert - NSFOCUS\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/oracle123.jpg\",\"datePublished\":\"2020-04-26T01:35:06+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/oracle123.jpg\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2019\\\/01\\\/oracle123.jpg\",\"width\":572,\"height\":486,\"caption\":\"Oracle logo in red text.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/nsfocusglobal.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#website\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"name\":\"NSFOCUS\",\"description\":\"Security Made Smart and Simple\",\"publisher\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#organization\",\"name\":\"NSFOCUS\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"contentUrl\":\"https:\\\/\\\/nsfocusglobal.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/logo-ns.png\",\"width\":248,\"height\":36,\"caption\":\"NSFOCUS\"},\"image\":{\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/#\\\/schema\\\/person\\\/fd9ab61c9c77a81bbd870f725cc0c61d\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/nsfocusglobal.com\"],\"url\":\"https:\\\/\\\/nsfocusglobal.com\\\/pt-br\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert - NSFOCUS","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"pt_BR","og_type":"article","og_title":"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert - NSFOCUS","og_description":"Overview On April 14, 2020, local time, Oracle released its own security advisory and third-party security advisories for its April 2020 Critical Patch","og_url":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/","og_site_name":"NSFOCUS","article_published_time":"2020-04-26T01:35:06+00:00","og_image":[{"url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2019\/01\/oracle123.jpg","type":"","width":"","height":""}],"author":"admin","twitter_card":"summary_large_image","twitter_title":"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert - NSFOCUS","twitter_description":"Overview On April 14, 2020, local time, Oracle released its own security advisory and third-party security advisories for its April 2020 Critical Patch","twitter_image":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2019\/01\/oracle123.jpg","twitter_misc":{"Escrito por":"admin","Est. tempo de leitura":"8 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/#article","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/"},"author":{"name":"admin","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d"},"headline":"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert","datePublished":"2020-04-26T01:35:06+00:00","mainEntityOfPage":{"@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/"},"wordCount":1530,"publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"image":{"@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2019\/01\/oracle123.jpg","keywords":["Oracle"],"articleSection":["Emergency Response"],"inLanguage":"pt-BR"},{"@type":"WebPage","@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/","url":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/","name":"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert - NSFOCUS","isPartOf":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/#primaryimage"},"image":{"@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/#primaryimage"},"thumbnailUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2019\/01\/oracle123.jpg","datePublished":"2020-04-26T01:35:06+00:00","breadcrumb":{"@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/#primaryimage","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2019\/01\/oracle123.jpg","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2019\/01\/oracle123.jpg","width":572,"height":486,"caption":"Oracle logo in red text."},{"@type":"BreadcrumbList","@id":"https:\/\/nsfocusglobal.com\/oracle-april-2020-critical-patch-update-for-all-product-families-threat-alert\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nsfocusglobal.com\/"},{"@type":"ListItem","position":2,"name":"Oracle April 2020 Critical Patch Update for All Product Families Threat Alert"}]},{"@type":"WebSite","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#website","url":"https:\/\/nsfocusglobal.com\/pt-br\/","name":"NSFOCUS","description":"Security Made Smart and Simple","publisher":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nsfocusglobal.com\/pt-br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#organization","name":"NSFOCUS","url":"https:\/\/nsfocusglobal.com\/pt-br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/","url":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","contentUrl":"https:\/\/nsfocusglobal.com\/wp-content\/uploads\/2024\/08\/logo-ns.png","width":248,"height":36,"caption":"NSFOCUS"},"image":{"@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/nsfocusglobal.com\/pt-br\/#\/schema\/person\/fd9ab61c9c77a81bbd870f725cc0c61d","name":"admin","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3dc987908fc59791d261b1006d84eb931d15287261476b9384e690ed0c568de?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/nsfocusglobal.com"],"url":"https:\/\/nsfocusglobal.com\/pt-br\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/10362","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/comments?post=10362"}],"version-history":[{"count":0,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/posts\/10362\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media\/7955"}],"wp:attachment":[{"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/media?parent=10362"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/categories?post=10362"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsfocusglobal.com\/pt-br\/wp-json\/wp\/v2\/tags?post=10362"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}